Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/3137372e39322e3138382e302f32322d3232203d3e20323633313236.roa
File:                     3137372e39322e3138382e302f32322d3232203d3e20323633313236.roa (raw, json)
Hash identifier:          NRdTf+wS9HjuVNiDhyJdOK3700GyJVC6X49hA38Hn94=
Subject key identifier:   9A:F0:61:01:60:09:FB:18:A1:52:34:54:0F:B2:D1:72:A3:14:7D:66
Certificate issuer:       /CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642
Certificate serial:       34FD4654CEBF921DC425E5994B0E060906C0AD6F
Authority key identifier: 4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/3137372e39322e3138382e302f32322d3232203d3e20323633313236.roa
Signing time:             Thu 23 Apr 2026 03:41:06 +0000
ROA not before:           Thu 23 Apr 2026 03:36:06 +0000
ROA not after:            Thu 22 Apr 2027 03:41:06 +0000
asID:                     263126
IP address blocks:        177.92.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl
                          rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 01:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fd:46:54:ce:bf:92:1d:c4:25:e5:99:4b:0e:06:09:06:c0:ad:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642
        Validity
            Not Before: Apr 23 03:36:06 2026 GMT
            Not After : Apr 22 03:41:06 2027 GMT
        Subject: CN=9AF061016009FB18A15234540FB2D172A3147D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:e8:59:6d:93:0b:3c:c0:51:79:9e:ae:ec:
                    0c:e5:03:b2:a3:65:a1:56:53:9f:4f:70:d1:d5:15:
                    e2:9a:0c:b6:f4:00:94:ec:96:34:f8:9e:73:f2:1c:
                    52:af:da:72:4d:bf:c7:8d:0d:96:5a:c3:52:f4:5d:
                    f5:de:f1:40:96:a3:93:29:10:80:57:34:6d:95:3b:
                    2a:8c:d6:5d:af:c4:14:4d:e8:f7:bd:9c:8b:f5:e0:
                    6b:04:4f:36:23:c1:69:92:d3:cb:91:e9:96:ad:42:
                    d7:97:08:15:0f:8a:c7:e5:f4:d1:e3:eb:1c:63:90:
                    6c:e3:5f:90:ca:2b:8f:a6:23:07:f2:88:a7:01:53:
                    11:3e:27:1f:2b:5f:a7:4c:3b:eb:95:bc:b8:6b:a4:
                    85:46:42:6c:55:bf:e8:91:67:45:73:d8:ed:72:ed:
                    56:d0:72:45:62:5c:0b:50:e8:98:83:d1:0f:7c:ad:
                    ee:5e:b7:b4:e8:7d:34:2a:24:ad:16:68:32:a7:4e:
                    51:08:f2:47:10:c8:ee:84:65:0c:d1:20:79:9c:5b:
                    1a:42:4b:c8:2f:e9:f4:57:56:3c:67:16:46:0d:a1:
                    e9:39:02:eb:7b:aa:0a:40:3e:fa:e5:b1:9d:26:d3:
                    49:b6:95:fc:bf:9e:3c:58:bc:04:18:11:68:05:79:
                    9e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F0:61:01:60:09:FB:18:A1:52:34:54:0F:B2:D1:72:A3:14:7D:66
            X509v3 Authority Key Identifier:
                keyid:4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/3137372e39322e3138382e302f32322d3232203d3e20323633313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:3c:52:01:b6:ca:fb:ea:f4:60:03:e0:af:2c:92:1a:ea:e0:
         6a:a7:11:dd:fe:4f:46:1a:65:20:e0:0b:ae:f0:51:d7:d4:d7:
         19:c9:f2:83:f8:e8:25:e0:40:89:4e:e7:30:cd:77:71:96:f8:
         d8:b3:c2:92:29:64:e3:18:fb:1d:32:63:ea:12:f0:51:52:b8:
         1b:3f:e7:d4:f7:c5:e6:ec:fe:e3:be:3b:cd:8c:f0:dd:58:97:
         42:8a:85:92:3c:4d:ae:a7:1d:89:f4:70:47:98:89:75:c6:8b:
         00:5e:73:08:99:be:b0:b8:cf:d8:5f:15:05:df:29:0b:ab:78:
         6e:bd:35:39:77:d4:49:8f:14:e4:1f:bf:50:63:fe:94:fc:e6:
         0e:85:f1:cb:2d:8a:cc:53:17:f0:8a:bd:97:17:a1:28:25:1a:
         6e:82:35:93:d3:cd:c6:95:d6:13:31:c5:1c:30:fd:e8:47:9b:
         f6:2b:a5:f0:08:4e:8f:ef:33:9f:0d:04:6f:49:2a:38:e8:31:
         6f:ad:62:d9:9c:78:30:5f:8c:b5:a4:fe:7e:97:f0:df:2d:ed:
         e6:73:fc:d6:51:f6:bc:fe:94:8c:0b:c0:1d:d5:4c:7f:6e:79:
         81:3f:b0:16:a3:31:53:2e:d4:4a:54:e4:79:98:fd:de:af:75:
         36:89:3f:b9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNP1GVM6/kh3EJeWZSw4GCQbArW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENBMjFBOEQ5MjhDQUJDMEM5RUYxMzg1MDYzNUIzMUVB
RjNDMjY0MjAeFw0yNjA0MjMwMzM2MDZaFw0yNzA0MjIwMzQxMDZaMDMxMTAvBgNV
BAMTKDlBRjA2MTAxNjAwOUZCMThBMTUyMzQ1NDBGQjJEMTcyQTMxNDdENjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4BuhZbZMLPMBReZ6u7AzlA7Kj
ZaFWU59PcNHVFeKaDLb0AJTsljT4nnPyHFKv2nJNv8eNDZZaw1L0XfXe8UCWo5Mp
EIBXNG2VOyqM1l2vxBRN6Pe9nIv14GsETzYjwWmS08uR6ZatQteXCBUPisfl9NHj
6xxjkGzjX5DKK4+mIwfyiKcBUxE+Jx8rX6dMO+uVvLhrpIVGQmxVv+iRZ0Vz2O1y
7VbQckViXAtQ6JiD0Q98re5et7TofTQqJK0WaDKnTlEI8kcQyO6EZQzRIHmcWxpC
S8gv6fRXVjxnFkYNoek5Aut7qgpAPvrlsZ0m00m2lfy/njxYvAQYEWgFeZ7FAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmvBhAWAJ+xihUjRUD7LRcqMUfWYwHwYDVR0j
BBgwFoAUTKIajZKMq8DJ7xOFBjWzHq88JkIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDl1VzFrQ2hjRFlBRWpaZWc4RlhxWTdFRXBXWnZCOHozeEQ0aTJQWVZU
c2cvMS80Q0EyMUE4RDkyOENBQkMwQzlFRjEzODUwNjM1QjMxRUFGM0MyNjQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDQTIxQThEOTI4Q0FCQzBD
OUVGMTM4NTA2MzVCMzFFQUYzQzI2NDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ5dVcxa0NoY0RZQUVqWmVnOEZYcVk3RUVwV1p2Qjh6M3hENGkyUFlWVHNnLzEv
MzEzNzM3MmUzOTMyMmUzMTM4MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzMTMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxXLwwDQYJKoZIhvcNAQELBQADggEBALk8UgG2
yvvq9GAD4K8skhrq4GqnEd3+T0YaZSDgC67wUdfU1xnJ8oP46CXgQIlO5zDNd3GW
+NizwpIpZOMY+x0yY+oS8FFSuBs/59T3xebs/uO+O82M8N1Yl0KKhZI8Ta6nHYn0
cEeYiXXGiwBecwiZvrC4z9hfFQXfKQureG69NTl31EmPFOQfv1Bj/pT85g6F8cst
isxTF/CKvZcXoSglGm6CNZPTzcaV1hMxxRww/ehHm/YrpfAITo/vM58NBG9JKjjo
MW+tYtmceDBfjLWk/n6X8N8t7eZz/NZR9rz+lIwLwB3VTH9ueYE/sBajMVMu1EpU
5HmY/d6vdTaJP7k=
-----END CERTIFICATE-----
Generated at Wed May 13 19:15:17 2026 by rpki-client